$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa File: 8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa (raw, json) Hash identifier: UObhw/RQJgJmM/Cmo4MNb1wH/4Ekvo5VzZjn0lwZ7cM= Subject key identifier: 1B:4C:E6:AE:61:F1:8A:19:F8:9F:9B:79:9A:DC:A8:B2:0C:53:73:D1 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584B2E5C5B0DB88CFEA95321FF00 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 401492 IP address blocks: 205.213.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5b:0d:b8:8c:fe:a9:53:21:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=d20ee7cc-b142-4c91-b209-f0ba1dc9ce80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:69:82:76:33:69:60:48:5f:89:7a:b2:8f: 1b:ad:23:db:b7:1e:c5:b7:44:e4:88:25:bb:b6:a5: 10:ee:79:e1:fd:73:64:df:b8:a2:91:db:97:23:17: af:29:cb:d2:ad:f5:13:f7:ff:66:f8:d6:22:91:b5: 83:3a:ec:5a:ea:77:60:90:ff:f8:cd:9e:25:28:70: 24:42:f6:5c:bc:7a:cc:a0:19:0c:83:39:82:93:88: 5e:08:db:b8:ac:82:be:42:4b:1a:01:cd:ea:b1:b8: 53:f7:87:03:67:d2:f8:bd:21:43:6c:1b:88:40:c5: f8:e9:82:8a:3a:9b:2c:d9:ac:ea:12:e7:66:2b:e3: af:df:3d:e9:ca:4b:66:1f:4d:16:cc:5b:d5:fa:95: af:fb:32:41:01:16:68:d6:10:f8:74:54:ee:42:d4: 2b:f3:9d:39:a3:ee:9f:8e:70:26:b3:d4:14:71:f1: 1e:6b:9d:fb:eb:5c:8c:b5:4f:f1:91:b7:5b:d0:d1: df:28:0a:f1:a0:19:89:18:e0:22:37:27:ec:50:18: 56:8f:a7:d7:37:c8:26:5d:ae:2f:5d:23:2d:b5:2a: c8:08:89:1b:cd:d1:23:c8:b2:aa:9f:e4:b0:58:c1: 8c:f8:36:b3:5e:f0:e6:ab:e5:3f:34:c5:06:2f:59: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4C:E6:AE:61:F1:8A:19:F8:9F:9B:79:9A:DC:A8:B2:0C:53:73:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5c:9e:48:4b:15:9e:4b:ee:e6:7c:1b:01:47:ab:81:48:6c: c8:59:84:7b:f7:a3:b9:90:1f:e8:b3:04:07:38:fc:ca:17:95: c1:eb:44:56:8d:99:93:2c:cc:26:62:e6:35:7f:f4:93:66:f4: 86:ce:34:ae:f8:63:63:e7:0b:be:1b:40:49:82:02:d1:28:95: 60:2a:15:28:c8:00:cb:87:c1:97:fe:11:11:ee:5a:a7:1d:43: ff:55:dc:3f:6c:1e:a3:69:78:c9:05:ed:5c:fb:25:ce:68:08: 5b:a9:cb:7a:16:8d:b9:32:4e:38:4b:44:79:cf:65:24:2c:e7: 53:8c:ed:85:fd:57:94:74:c5:4a:3a:69:4c:7f:98:c9:52:53: ed:f3:47:00:c0:f1:92:ea:1a:f6:99:24:b6:0e:19:50:9e:a5: 73:94:7e:e6:11:74:72:f3:ad:0e:dd:34:f1:35:d2:29:b7:9b: a3:c0:02:ea:23:5b:36:2d:ed:d6:c4:bd:9b:d7:f3:b6:5b:66: bf:a7:9e:91:57:e3:14:3f:e2:d3:21:39:f5:4a:1f:e2:0c:28: eb:11:3a:75:25:86:17:e6:31:e1:21:58:0c:ea:49:f4:29:1f: 36:c0:63:dc:f2:a2:fe:e4:9b:5a:ee:0d:79:d3:14:7c:34:fe: 02:bf:ca:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFsNuIz+qVMh/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDIwZWU3Y2MtYjE0Mi00YzkxLWIyMDktZjBiYTFkYzljZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCNpgnYzaWBIX4l6so8brSPbtx7Ft0TkiCW7 tqUQ7nnh/XNk37iikduXIxevKcvSrfUT9/9m+NYikbWDOuxa6ndgkP/4zZ4lKHAk QvZcvHrMoBkMgzmCk4heCNu4rIK+QksaAc3qsbhT94cDZ9L4vSFDbBuIQMX46YKK Opss2azqEudmK+Ov3z3pyktmH00WzFvV+pWv+zJBARZo1hD4dFTuQtQr8505o+6f jnAms9QUcfEea53761yMtU/xkbdb0NHfKArxoBmJGOAiNyfsUBhWj6fXN8gmXa4v XSMttSrICIkbzdEjyLKqn+SwWMGM+DazXvDmq+U/NMUGL1n5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtM5q5h8YoZ+J+beZrcqLIMU3PRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvOGQwNDA0MjYtZTY4Yy0z Yzc1LTliYjgtMWE5YTg2YmE1MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdcnkhLFZ5L7uZ8GwFHq4FIbMhZhHv3o7mQH+izBAc4/MoXlcHrRFaN mZMszCZi5jV/9JNm9IbONK74Y2PnC74bQEmCAtEolWAqFSjIAMuHwZf+ERHuWqcd Q/9V3D9sHqNpeMkF7Vz7Jc5oCFupy3oWjbkyTjhLRHnPZSQs51OM7YX9V5R0xUo6 aUx/mMlSU+3zRwDA8ZLqGvaZJLYOGVCepXOUfuYRdHLzrQ7dNPE10im3m6PAAuoj WzYt7dbEvZvX87ZbZr+nnpFX4xQ/4tMhOfVKH+IMKOsROnUlhhfmMeEhWAzqSfQp HzbAY9zyov7km1ruDXnTFHw0/gK/yqM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:41 2025 by rpki-client